Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.mft
File:                     FNaSe1p1t2abH-Ksj9x7YTd8kQE.mft (raw, json)
Hash identifier:          Azifx9F5kmMhb8d0ni1eplz0inFY9MrHnwbiofYyZdo=
Subject key identifier:   3C:59:17:71:55:6E:2F:99:5F:6C:C0:F0:BB:AD:3D:7A:67:8A:21:9D
Authority key identifier: 14:D6:92:7B:5A:75:B7:66:9B:1F:E2:AC:8F:DC:7B:61:37:7C:91:01
Certificate issuer:       /CN=14d6927b5a75b7669b1fe2ac8fdc7b61377c9101
Certificate serial:       019E905C41A95217A3844F93FF029FE3B400
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FNaSe1p1t2abH-Ksj9x7YTd8kQE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.mft
Manifest number:          0F48
Signing time:             Thu 04 Jun 2026 02:00:25 +0000
Manifest this update:     Thu 04 Jun 2026 02:00:25 +0000
Manifest next update:     Fri 05 Jun 2026 02:00:25 +0000
Files and hashes:         1: FNaSe1p1t2abH-Ksj9x7YTd8kQE.crl (hash: VfqZPWtgVeA/OifaRCCE3ifX54CYngYHoDBkxkjJ4mo=)
                          2: jjz54tPWsuXjHrsRR3lGh9uQu6o.roa (hash: 02vfAYgOdeQNaFi8ZY69MJehPQkiX3iDuuBOrYgPuMM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FNaSe1p1t2abH-Ksj9x7YTd8kQE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Jun 2026 02:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:90:5c:41:a9:52:17:a3:84:4f:93:ff:02:9f:e3:b4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14d6927b5a75b7669b1fe2ac8fdc7b61377c9101
        Validity
            Not Before: Jun  4 02:00:25 2026 GMT
            Not After : Jun  5 02:00:25 2026 GMT
        Subject: CN=3c591771556e2f995f6cc0f0bbad3d7a678a219d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e5:aa:a4:28:19:5e:a9:30:84:e8:71:2a:d7:
                    b8:e3:91:3b:de:69:10:20:ac:25:64:65:dd:57:50:
                    be:57:e8:0f:48:72:4f:d3:3e:f7:c0:7b:a1:86:a1:
                    a1:6a:c7:62:52:21:0b:1b:08:6b:f2:04:7b:48:f0:
                    7f:2b:57:b3:65:d3:c5:ed:fd:84:2f:97:ac:ce:13:
                    ca:94:80:de:c5:18:0b:96:6b:4e:ae:72:ce:d2:b5:
                    17:4b:41:20:86:8d:a8:42:a0:0b:ff:1c:57:81:d9:
                    62:38:ae:fc:13:c7:e9:43:c1:21:af:a1:65:49:5c:
                    61:14:f5:e2:33:0c:dd:78:ed:35:99:38:73:74:c2:
                    3f:43:18:ce:8e:67:e2:40:71:47:e8:ad:6d:e9:97:
                    73:d4:83:3f:8e:9c:00:d1:59:0b:c0:86:f5:9c:a1:
                    05:0a:49:29:51:c5:46:3b:f1:2d:8f:01:8c:79:d8:
                    f1:04:d7:da:6d:e2:bb:e4:92:24:79:50:34:54:c7:
                    f3:8a:ce:05:a1:7d:03:4b:90:93:f0:c7:bc:41:78:
                    b8:d6:0f:c9:73:9a:a4:fd:16:44:80:ba:7b:88:e0:
                    2e:ce:2c:30:fb:4a:ce:50:48:9a:85:df:0d:88:e0:
                    b0:a5:13:31:e5:9f:41:e9:f9:3a:e1:3e:33:c9:fb:
                    50:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:59:17:71:55:6E:2F:99:5F:6C:C0:F0:BB:AD:3D:7A:67:8A:21:9D
            X509v3 Authority Key Identifier:
                keyid:14:D6:92:7B:5A:75:B7:66:9B:1F:E2:AC:8F:DC:7B:61:37:7C:91:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNaSe1p1t2abH-Ksj9x7YTd8kQE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:59:40:6c:0b:78:a0:0e:3d:2a:cf:3c:5b:fd:39:b7:c3:ff:
         e6:2a:f7:ca:87:4f:e4:90:0d:d7:eb:3a:f2:26:b2:89:35:65:
         2d:5b:14:08:2b:86:7e:ad:7a:cb:62:5b:61:95:43:6a:b4:f2:
         db:58:91:bc:af:5e:ae:0d:9f:ea:e3:b7:fe:40:6d:ed:89:6b:
         1b:b8:3c:a8:bb:9b:cb:3a:28:b9:93:1c:04:e6:0d:a2:68:82:
         52:01:8b:ca:07:41:6f:1d:75:0b:28:88:45:8f:19:07:f1:09:
         c4:49:a9:51:52:6b:ec:c9:a8:21:87:96:1b:fa:8e:25:8b:4f:
         3c:8d:0a:ce:ef:84:e9:ae:0f:41:98:3d:f1:f8:d6:74:af:0b:
         ac:e8:da:6f:3f:67:ee:6f:7c:ed:37:ac:4b:e6:8f:c1:05:0f:
         7e:64:1a:26:5d:c6:18:ea:af:97:63:c9:b5:34:f7:8c:35:07:
         97:d6:1d:ac:cf:c9:fb:e8:11:3b:57:54:93:c9:4e:8d:cb:5d:
         4b:6a:50:2b:3f:51:32:ba:28:5a:d0:aa:7c:9c:3a:b9:45:d7:
         03:97:10:7b:6f:87:ae:ba:92:a6:f1:72:78:da:ac:dd:19:ef:
         a1:f5:f8:f2:4c:bb:f6:df:39:09:c8:1b:b9:d8:3d:51:d9:f1:
         24:01:8f:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 12:14:59 2026 by rpki-client